Educación, Formación, Conciencia, Conocimiento, y el Cumplimiento de la Política de Seguridad de la Información
Due to information security's (IS) importance in protecting organizations' data, international standards, norms, and best practices have been proposed for managing IS. Organizations establish the information security management systems and the information security policies (PSI) that their...
Gespeichert in:
| Veröffentlicht in: | RISTI : Revista Ibérica de Sistemas e Tecnologias de Informação 2023-11 (E63), p.161-170 |
|---|---|
| Hauptverfasser: | , |
| Format: | Artikel |
| Sprache: | spa |
| Schlagworte: | |
| Online-Zugang: | Volltext |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| container_end_page | 170 |
|---|---|
| container_issue | E63 |
| container_start_page | 161 |
| container_title | RISTI : Revista Ibérica de Sistemas e Tecnologias de Informação |
| container_volume | |
| creator | Bayona-Oré, Sussy Fong, Norman |
| description | Due to information security's (IS) importance in protecting organizations' data, international standards, norms, and best practices have been proposed for managing IS. Organizations establish the information security management systems and the information security policies (PSI) that their organizational collaborators must adopt. [...]organizations continue to experience IS incidents because of more than the information technologies required or norms established for PSI compliance - the components of the people within the system who ensure policy compliance are also crucial. The results show that education, training, and awareness programmes relate to PSI compliance intentions, while security knowledge influences attitudes towards compliance with the PSI. Keywords: Information Security Policy; SETA; formation; education; awareness; knowledge. i. Introducción Las Tecnologías de Información y Comunicaciones (TIC) han evolucionado trayendo consigo beneficios, oportunidades y a su vez amenazas en las áreas de información (Kamariotou & Kitsios, 2023), amenazas que, si no se gestionan adecuadamente, tienen un impacto negativo en las empresas (Alraja et al., 2023). La PSI es un documento que integra las reglas, normas y procedimientos y es fundamental para gestionar adecuadamente la SI (Karlsson et al., 2022) y es de cumplimiento obligatorio de los colaboradores de la organización. |
| format | Article |
| fullrecord | <record><control><sourceid>proquest</sourceid><recordid>TN_cdi_proquest_journals_2904285865</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>2904285865</sourcerecordid><originalsourceid>FETCH-proquest_journals_29042858653</originalsourceid><addsrcrecordid>eNpjYeA0NDMx07W0sDTlYOAtLs4yAAJTA2NLCyNOhmLXlNLkxOTMw5vzdBTc8otyYWzn_LzkzFQgTgSz85Mzc4HcknwdhUqF1BwF59LcghyokEJKqkJOokJAfs7htSWZyYkgfnBqemlRZkpiClTSMy8NbjgPA2taYk5xKi-U5mZQdnMNcfbQLSjKLyxNLS6Jz8ovLcoDSsUbWRqYGFmYWpiZGhOnCgCyuk1v</addsrcrecordid><sourcetype>Aggregation Database</sourcetype><iscdi>true</iscdi><recordtype>article</recordtype><pqid>2904285865</pqid></control><display><type>article</type><title>Educación, Formación, Conciencia, Conocimiento, y el Cumplimiento de la Política de Seguridad de la Información</title><source>Elektronische Zeitschriftenbibliothek - Freely accessible e-journals</source><creator>Bayona-Oré, Sussy ; Fong, Norman</creator><creatorcontrib>Bayona-Oré, Sussy ; Fong, Norman</creatorcontrib><description>Due to information security's (IS) importance in protecting organizations' data, international standards, norms, and best practices have been proposed for managing IS. Organizations establish the information security management systems and the information security policies (PSI) that their organizational collaborators must adopt. [...]organizations continue to experience IS incidents because of more than the information technologies required or norms established for PSI compliance - the components of the people within the system who ensure policy compliance are also crucial. The results show that education, training, and awareness programmes relate to PSI compliance intentions, while security knowledge influences attitudes towards compliance with the PSI. Keywords: Information Security Policy; SETA; formation; education; awareness; knowledge. i. Introducción Las Tecnologías de Información y Comunicaciones (TIC) han evolucionado trayendo consigo beneficios, oportunidades y a su vez amenazas en las áreas de información (Kamariotou & Kitsios, 2023), amenazas que, si no se gestionan adecuadamente, tienen un impacto negativo en las empresas (Alraja et al., 2023). La PSI es un documento que integra las reglas, normas y procedimientos y es fundamental para gestionar adecuadamente la SI (Karlsson et al., 2022) y es de cumplimiento obligatorio de los colaboradores de la organización.</description><identifier>ISSN: 1646-9895</identifier><language>spa</language><publisher>Lousada: Associação Ibérica de Sistemas e Tecnologias de Informacao</publisher><subject>Best practice ; Compliance ; Education ; Information management ; Management systems ; Norms ; Organizations ; Security ; Security management ; Training</subject><ispartof>RISTI : Revista Ibérica de Sistemas e Tecnologias de Informação, 2023-11 (E63), p.161-170</ispartof><rights>2023. This work is published under https://creativecommons.org/licenses/by-nc-nd/4.0/ (the “License”). Notwithstanding the ProQuest Terms and Conditions, you may use this content in accordance with the terms of the License.</rights><lds50>peer_reviewed</lds50><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><link.rule.ids>314,776,780</link.rule.ids></links><search><creatorcontrib>Bayona-Oré, Sussy</creatorcontrib><creatorcontrib>Fong, Norman</creatorcontrib><title>Educación, Formación, Conciencia, Conocimiento, y el Cumplimiento de la Política de Seguridad de la Información</title><title>RISTI : Revista Ibérica de Sistemas e Tecnologias de Informação</title><description>Due to information security's (IS) importance in protecting organizations' data, international standards, norms, and best practices have been proposed for managing IS. Organizations establish the information security management systems and the information security policies (PSI) that their organizational collaborators must adopt. [...]organizations continue to experience IS incidents because of more than the information technologies required or norms established for PSI compliance - the components of the people within the system who ensure policy compliance are also crucial. The results show that education, training, and awareness programmes relate to PSI compliance intentions, while security knowledge influences attitudes towards compliance with the PSI. Keywords: Information Security Policy; SETA; formation; education; awareness; knowledge. i. Introducción Las Tecnologías de Información y Comunicaciones (TIC) han evolucionado trayendo consigo beneficios, oportunidades y a su vez amenazas en las áreas de información (Kamariotou & Kitsios, 2023), amenazas que, si no se gestionan adecuadamente, tienen un impacto negativo en las empresas (Alraja et al., 2023). La PSI es un documento que integra las reglas, normas y procedimientos y es fundamental para gestionar adecuadamente la SI (Karlsson et al., 2022) y es de cumplimiento obligatorio de los colaboradores de la organización.</description><subject>Best practice</subject><subject>Compliance</subject><subject>Education</subject><subject>Information management</subject><subject>Management systems</subject><subject>Norms</subject><subject>Organizations</subject><subject>Security</subject><subject>Security management</subject><subject>Training</subject><issn>1646-9895</issn><fulltext>true</fulltext><rsrctype>article</rsrctype><creationdate>2023</creationdate><recordtype>article</recordtype><sourceid>ABUWG</sourceid><sourceid>AFKRA</sourceid><sourceid>AZQEC</sourceid><sourceid>BENPR</sourceid><sourceid>CCPQU</sourceid><sourceid>DWQXO</sourceid><sourceid>GNUQQ</sourceid><recordid>eNpjYeA0NDMx07W0sDTlYOAtLs4yAAJTA2NLCyNOhmLXlNLkxOTMw5vzdBTc8otyYWzn_LzkzFQgTgSz85Mzc4HcknwdhUqF1BwF59LcghyokEJKqkJOokJAfs7htSWZyYkgfnBqemlRZkpiClTSMy8NbjgPA2taYk5xKi-U5mZQdnMNcfbQLSjKLyxNLS6Jz8ovLcoDSsUbWRqYGFmYWpiZGhOnCgCyuk1v</recordid><startdate>20231101</startdate><enddate>20231101</enddate><creator>Bayona-Oré, Sussy</creator><creator>Fong, Norman</creator><general>Associação Ibérica de Sistemas e Tecnologias de Informacao</general><scope>3V.</scope><scope>7XB</scope><scope>8AL</scope><scope>8FE</scope><scope>8FG</scope><scope>8FK</scope><scope>ABUWG</scope><scope>AFKRA</scope><scope>ARAPS</scope><scope>AZQEC</scope><scope>BENPR</scope><scope>BFMQW</scope><scope>BGLVJ</scope><scope>CCPQU</scope><scope>CLZPN</scope><scope>DWQXO</scope><scope>GNUQQ</scope><scope>HCIFZ</scope><scope>JQ2</scope><scope>K7-</scope><scope>M0N</scope><scope>P5Z</scope><scope>P62</scope><scope>PIMPY</scope><scope>PQEST</scope><scope>PQQKQ</scope><scope>PQUKI</scope><scope>PRINS</scope><scope>Q9U</scope></search><sort><creationdate>20231101</creationdate><title>Educación, Formación, Conciencia, Conocimiento, y el Cumplimiento de la Política de Seguridad de la Información</title><author>Bayona-Oré, Sussy ; Fong, Norman</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-proquest_journals_29042858653</frbrgroupid><rsrctype>articles</rsrctype><prefilter>articles</prefilter><language>spa</language><creationdate>2023</creationdate><topic>Best practice</topic><topic>Compliance</topic><topic>Education</topic><topic>Information management</topic><topic>Management systems</topic><topic>Norms</topic><topic>Organizations</topic><topic>Security</topic><topic>Security management</topic><topic>Training</topic><toplevel>peer_reviewed</toplevel><toplevel>online_resources</toplevel><creatorcontrib>Bayona-Oré, Sussy</creatorcontrib><creatorcontrib>Fong, Norman</creatorcontrib><collection>ProQuest Central (Corporate)</collection><collection>ProQuest Central (purchase pre-March 2016)</collection><collection>Computing Database (Alumni Edition)</collection><collection>ProQuest SciTech Collection</collection><collection>ProQuest Technology Collection</collection><collection>ProQuest Central (Alumni) (purchase pre-March 2016)</collection><collection>ProQuest Central (Alumni)</collection><collection>ProQuest Central UK/Ireland</collection><collection>Advanced Technologies & Aerospace Database (1962 - current)</collection><collection>ProQuest Central Essentials</collection><collection>ProQuest Central</collection><collection>Continental Europe Database</collection><collection>Technology Collection</collection><collection>ProQuest One Community College</collection><collection>Latin America & Iberia Database</collection><collection>ProQuest Central</collection><collection>ProQuest Central Student</collection><collection>SciTech Premium Collection</collection><collection>ProQuest Computer Science Collection</collection><collection>Computer Science Database</collection><collection>Computing Database</collection><collection>ProQuest advanced technologies & aerospace journals</collection><collection>test</collection><collection>Publicly Available Content Database</collection><collection>ProQuest One Academic Eastern Edition (DO NOT USE)</collection><collection>ProQuest One Academic</collection><collection>ProQuest One Academic UKI Edition</collection><collection>ProQuest Central China</collection><collection>ProQuest Central Basic</collection><jtitle>RISTI : Revista Ibérica de Sistemas e Tecnologias de Informação</jtitle></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext</fulltext></delivery><addata><au>Bayona-Oré, Sussy</au><au>Fong, Norman</au><format>journal</format><genre>article</genre><ristype>JOUR</ristype><atitle>Educación, Formación, Conciencia, Conocimiento, y el Cumplimiento de la Política de Seguridad de la Información</atitle><jtitle>RISTI : Revista Ibérica de Sistemas e Tecnologias de Informação</jtitle><date>2023-11-01</date><risdate>2023</risdate><issue>E63</issue><spage>161</spage><epage>170</epage><pages>161-170</pages><issn>1646-9895</issn><abstract>Due to information security's (IS) importance in protecting organizations' data, international standards, norms, and best practices have been proposed for managing IS. Organizations establish the information security management systems and the information security policies (PSI) that their organizational collaborators must adopt. [...]organizations continue to experience IS incidents because of more than the information technologies required or norms established for PSI compliance - the components of the people within the system who ensure policy compliance are also crucial. The results show that education, training, and awareness programmes relate to PSI compliance intentions, while security knowledge influences attitudes towards compliance with the PSI. Keywords: Information Security Policy; SETA; formation; education; awareness; knowledge. i. Introducción Las Tecnologías de Información y Comunicaciones (TIC) han evolucionado trayendo consigo beneficios, oportunidades y a su vez amenazas en las áreas de información (Kamariotou & Kitsios, 2023), amenazas que, si no se gestionan adecuadamente, tienen un impacto negativo en las empresas (Alraja et al., 2023). La PSI es un documento que integra las reglas, normas y procedimientos y es fundamental para gestionar adecuadamente la SI (Karlsson et al., 2022) y es de cumplimiento obligatorio de los colaboradores de la organización.</abstract><cop>Lousada</cop><pub>Associação Ibérica de Sistemas e Tecnologias de Informacao</pub><oa>free_for_read</oa></addata></record> |
| fulltext | fulltext |
| identifier | ISSN: 1646-9895 |
| ispartof | RISTI : Revista Ibérica de Sistemas e Tecnologias de Informação, 2023-11 (E63), p.161-170 |
| issn | 1646-9895 |
| language | spa |
| recordid | cdi_proquest_journals_2904285865 |
| source | Elektronische Zeitschriftenbibliothek - Freely accessible e-journals |
| subjects | Best practice Compliance Education Information management Management systems Norms Organizations Security Security management Training |
| title | Educación, Formación, Conciencia, Conocimiento, y el Cumplimiento de la Política de Seguridad de la Información |
| url | https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-01-24T20%3A37%3A59IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-proquest&rft_val_fmt=info:ofi/fmt:kev:mtx:journal&rft.genre=article&rft.atitle=Educaci%C3%B3n,%20Formaci%C3%B3n,%20Conciencia,%20Conocimiento,%20y%20el%20Cumplimiento%20de%20la%20Pol%C3%ADtica%20de%20Seguridad%20de%20la%20Informaci%C3%B3n&rft.jtitle=RISTI%20:%20Revista%20Ib%C3%A9rica%20de%20Sistemas%20e%20Tecnologias%20de%20Informa%C3%A7%C3%A3o&rft.au=Bayona-Or%C3%A9,%20Sussy&rft.date=2023-11-01&rft.issue=E63&rft.spage=161&rft.epage=170&rft.pages=161-170&rft.issn=1646-9895&rft_id=info:doi/&rft_dat=%3Cproquest%3E2904285865%3C/proquest%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_pqid=2904285865&rft_id=info:pmid/&rfr_iscdi=true |